@elytracms/studio 0.0.47 → 0.0.48

package/dist/components/account/credential-panel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-panel.js","sourceRoot":"","sources":["../../../src/components/account/credential-panel.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAEhC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AACpD,OAAO,EACL,MAAM,EACN,IAAI,EACJ,WAAW,EACX,KAAK,EACL,OAAO,EACP,KAAK,EACL,GAAG,EACH,KAAK,EACL,IAAI,EACJ,KAAK,GACN,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAA;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AAEzC;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,eAAe;IAC7B,MAAM,IAAI,GAAG,OAAO,EAAE,CAAA;IACtB,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAA;IAC1C,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAA;IACpC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAA;IAC1C,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAwB,MAAM,CAAC,CAAA;IACjE,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAA;IAEvD,KAAK,UAAU,YAAY,CAAC,KAAiC;QAC3D,KAAK,CAAC,cAAc,EAAE,CAAA;QACtB,QAAQ,CAAC,IAAI,CAAC,CAAA;QACd,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,QAAQ,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC,CAAA;YAChD,OAAM;QACR,CAAC;QACD,QAAQ,CAAC,YAAY,CAAC,CAAA;QACtB,2EAA2E;QAC3E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,EAAE,eAAe,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;QACzF,QAAQ,CAAC,MAAM,CAAC,CAAA;QAChB,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,UAAU,CAAC,EAAE,CAAC,CAAA;YACd,OAAO,CAAC,EAAE,CAAC,CAAA;YACX,UAAU,CAAC,EAAE,CAAC,CAAA;YACd,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC,CAAA;YACpD,OAAM;QACR,CAAC;QACD,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAC1B,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,KAAK,YAAY,CAAA;IAEzC,OAAO,CACL,KAAC,IAAI,mBAAa,kBAAkB,YAClC,KAAC,WAAW,IAAC,SAAS,EAAC,MAAM,YAC3B,MAAC,KAAK,IAAC,GAAG,EAAC,GAAG,aACZ,MAAC,KAAK,IAAC,GAAG,EAAC,GAAG,aACZ,MAAC,GAAG,IAAC,GAAG,EAAC,GAAG,EAAC,KAAK,EAAC,QAAQ,aACzB,KAAC,WAAW,IAAC,SAAS,EAAC,8BAA8B,GAAG,EACxD,KAAC,OAAO,IAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAC,IAAI,YACzB,SAAS,CAAC,wBAAwB,CAAC,GAC5B,IACN,EACN,KAAC,IAAI,IAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,OAAO,YACzB,SAAS,CAAC,yBAAyB,CAAC,GAChC,IACD,EAER,eAAM,QAAQ,EAAE,YAAY,EAAE,UAAU,kBACtC,MAAC,KAAK,IAAC,GAAG,EAAC,GAAG,aACZ,KAAC,KAAK,IACJ,KAAK,EAAE,SAAS,CAAC,0BAA0B,CAAC,EAC5C,OAAO,EAAC,0BAA0B,EAClC,QAAQ,kBAER,KAAC,KAAK,IACJ,EAAE,EAAC,0BAA0B,EAC7B,IAAI,EAAC,UAAU,EACf,YAAY,EAAC,kBAAkB,EAC/B,KAAK,EAAE,OAAO,EACd,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAC3C,QAAQ,EAAE,UAAU,GACpB,GACI,EACR,KAAC,KAAK,IACJ,KAAK,EAAE,SAAS,CAAC,sBAAsB,CAAC,EACxC,OAAO,EAAC,sBAAsB,EAC9B,QAAQ,kBAER,KAAC,KAAK,IACJ,EAAE,EAAC,sBAAsB,EACzB,IAAI,EAAC,UAAU,EACf,YAAY,EAAC,cAAc,EAC3B,KAAK,EAAE,IAAI,EACX,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EACxC,QAAQ,EAAE,UAAU,GACpB,GACI,EACR,KAAC,KAAK,IACJ,KAAK,EAAE,SAAS,CAAC,0BAA0B,CAAC,EAC5C,OAAO,EAAC,0BAA0B,EAClC,QAAQ,QACR,KAAK,EAAE,KAAK,YAEZ,KAAC,KAAK,IACJ,EAAE,EAAC,0BAA0B,EAC7B,IAAI,EAAC,UAAU,EACf,YAAY,EAAC,cAAc,EAC3B,KAAK,EAAE,OAAO,EACd,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAC3C,QAAQ,EAAE,UAAU,GACpB,GACI,EACR,KAAC,GAAG,cACF,MAAC,MAAM,IACL,IAAI,EAAC,QAAQ,EACb,OAAO,EAAC,SAAS,EACjB,QAAQ,EAAE,UAAU,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,aAErD,KAAC,QAAQ,KAAG,EACX,UAAU;gDACT,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC;gDACxC,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,IACjC,GACL,IACA,GACH,IACD,GACI,GACT,CACR,CAAA;AACH,CAAC","sourcesContent":["import { useState } from 'react'\nimport type { FormEvent } from 'react'\nimport { KeyRound, ShieldCheck } from 'lucide-react'\nimport {\n  Button,\n  Card,\n  CardContent,\n  Field,\n  Heading,\n  Input,\n  Row,\n  Stack,\n  Text,\n  toast,\n} from '@elytracms/studio/ui'\nimport { translate } from '@elytracms/studio/lib/i18n'\nimport { useAuth } from '../auth-context'\n\n/**\n * The credential seam (EC-240 H-tail item 3) — part of the account **property\n * surface**, never a modal. Two blocks:\n *\n * - **Sign-in method** (read-only): today every studio account is email + password.\n *   OAuth \"connected accounts\" is a deferred extension.\n * - **Change password**: current + new + confirm, handed straight to\n *   `AuthAdapter.changePassword` (provider-delegated). SEAM ONLY — the raw values\n *   are never logged, stored, or inspected here; they leave in the adapter call.\n *\n * The current-password field is the gate around this sensitive action (no separate\n * confirm dialog needed).\n */\nexport function CredentialPanel() {\n  const auth = useAuth()\n  const [current, setCurrent] = useState('')\n  const [next, setNext] = useState('')\n  const [confirm, setConfirm] = useState('')\n  const [phase, setPhase] = useState<'idle' | 'submitting'>('idle')\n  const [error, setError] = useState<string | null>(null)\n\n  async function handleSubmit(event: FormEvent<HTMLFormElement>) {\n    event.preventDefault()\n    setError(null)\n    if (next !== confirm) {\n      setError(translate('account.password.mismatch'))\n      return\n    }\n    setPhase('submitting')\n    // The raw values leave here ONLY into the provider adapter — never logged.\n    const result = await auth.changePassword({ currentPassword: current, newPassword: next })\n    setPhase('idle')\n    if (result.ok) {\n      setCurrent('')\n      setNext('')\n      setConfirm('')\n      toast.success(translate('account.password.changed'))\n      return\n    }\n    setError(result.message)\n  }\n\n  const submitting = phase === 'submitting'\n\n  return (\n    <Card data-testid=\"credential-panel\">\n      <CardContent className=\"pt-5\">\n        <Stack gap=\"4\">\n          <Stack gap=\"1\">\n            <Row gap=\"2\" align=\"center\">\n              <ShieldCheck className=\"size-4 text-muted-foreground\" />\n              <Heading level={3} size=\"h4\">\n                {translate('account.security.title')}\n              </Heading>\n            </Row>\n            <Text size=\"sm\" tone=\"muted\">\n              {translate('account.security.method')}\n            </Text>\n          </Stack>\n\n          <form onSubmit={handleSubmit} noValidate>\n            <Stack gap=\"3\">\n              <Field\n                label={translate('account.password.current')}\n                htmlFor=\"account-current-password\"\n                required\n              >\n                <Input\n                  id=\"account-current-password\"\n                  type=\"password\"\n                  autoComplete=\"current-password\"\n                  value={current}\n                  onChange={(e) => setCurrent(e.target.value)}\n                  disabled={submitting}\n                />\n              </Field>\n              <Field\n                label={translate('account.password.new')}\n                htmlFor=\"account-new-password\"\n                required\n              >\n                <Input\n                  id=\"account-new-password\"\n                  type=\"password\"\n                  autoComplete=\"new-password\"\n                  value={next}\n                  onChange={(e) => setNext(e.target.value)}\n                  disabled={submitting}\n                />\n              </Field>\n              <Field\n                label={translate('account.password.confirm')}\n                htmlFor=\"account-confirm-password\"\n                required\n                error={error}\n              >\n                <Input\n                  id=\"account-confirm-password\"\n                  type=\"password\"\n                  autoComplete=\"new-password\"\n                  value={confirm}\n                  onChange={(e) => setConfirm(e.target.value)}\n                  disabled={submitting}\n                />\n              </Field>\n              <Row>\n                <Button\n                  type=\"submit\"\n                  variant=\"outline\"\n                  disabled={submitting || !current || !next || !confirm}\n                >\n                  <KeyRound />\n                  {submitting\n                    ? translate('account.password.changing')\n                    : translate('account.password.change')}\n                </Button>\n              </Row>\n            </Stack>\n          </form>\n        </Stack>\n      </CardContent>\n    </Card>\n  )\n}\n"]}

package/dist/components/account/self-account-schema.d.ts

@@ -0,0 +1,19 @@
+import type { CollectionDef } from '@elytracms/core/cms-core';
+/**
+ * The **account-settings** field lens (EC-240 H-tail) — the schema the portable
+ * edit shell renders when a member opens their OWN record (via the user menu). It
+ * diverges from the admin `usersCollectionDef` in exactly the way the ratified
+ * scope dictates:
+ *
+ * - **name / avatar are EDITABLE** (not `form.readOnly`) — the person edits their
+ *   own identity; the source's `save` routes these to `AuthAdapter.updateProfile`
+ *   (auth-owned), never the members rail.
+ * - **email is read-only** (email change is a separate, deferred seam).
+ * - **role is read-only** — you never change your own role (the server integrity
+ *   floor also guards it).
+ *
+ * Avatar is a plain URL text field for now; the media-picker convention is a
+ * deferred polish item — this keeps the mechanism (name + avatar → updateProfile)
+ * honest and complete without a half-built picker.
+ */
+export declare const selfAccountCollectionDef: CollectionDef;

package/dist/components/account/self-account-schema.js

@@ -0,0 +1,52 @@
+import { collectionDefSchema } from '@elytracms/core/cms-core';
+import { roleOptions } from '@elytracms/core/persistence';
+import { msgLabel } from '@elytracms/studio/lib/i18n';
+/**
+ * The **account-settings** field lens (EC-240 H-tail) — the schema the portable
+ * edit shell renders when a member opens their OWN record (via the user menu). It
+ * diverges from the admin `usersCollectionDef` in exactly the way the ratified
+ * scope dictates:
+ *
+ * - **name / avatar are EDITABLE** (not `form.readOnly`) — the person edits their
+ *   own identity; the source's `save` routes these to `AuthAdapter.updateProfile`
+ *   (auth-owned), never the members rail.
+ * - **email is read-only** (email change is a separate, deferred seam).
+ * - **role is read-only** — you never change your own role (the server integrity
+ *   floor also guards it).
+ *
+ * Avatar is a plain URL text field for now; the media-picker convention is a
+ * deferred polish item — this keeps the mechanism (name + avatar → updateProfile)
+ * honest and complete without a half-built picker.
+ */
+export const selfAccountCollectionDef = collectionDefSchema.parse({
+    id: 'account',
+    kind: 'document',
+    titleField: 'name',
+    form: {
+        label: msgLabel('account.rail.label'),
+        labelSingular: msgLabel('account.rail.labelSingular'),
+    },
+    fields: [
+        { name: 'name', type: 'text', form: { label: msgLabel('account.field.name.label') } },
+        {
+            name: 'avatar',
+            type: 'text',
+            form: {
+                label: msgLabel('account.field.avatar.label'),
+                description: msgLabel('account.field.avatar.hint'),
+            },
+        },
+        {
+            name: 'email',
+            type: 'text',
+            form: { label: msgLabel('account.field.email.label'), readOnly: true },
+        },
+        {
+            name: 'role',
+            type: 'select',
+            options: [...roleOptions()],
+            form: { label: msgLabel('account.field.role.label'), readOnly: true },
+        },
+    ],
+});
+//# sourceMappingURL=self-account-schema.js.map

package/dist/components/account/self-account-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"self-account-schema.js","sourceRoot":"","sources":["../../../src/components/account/self-account-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAE9D,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAA;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAA;AAErD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAkB,mBAAmB,CAAC,KAAK,CAAC;IAC/E,EAAE,EAAE,SAAS;IACb,IAAI,EAAE,UAAU;IAChB,UAAU,EAAE,MAAM;IAClB,IAAI,EAAE;QACJ,KAAK,EAAE,QAAQ,CAAC,oBAAoB,CAAC;QACrC,aAAa,EAAE,QAAQ,CAAC,4BAA4B,CAAC;KACtD;IACD,MAAM,EAAE;QACN,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,0BAA0B,CAAC,EAAE,EAAE;QACrF;YACE,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE;gBACJ,KAAK,EAAE,QAAQ,CAAC,4BAA4B,CAAC;gBAC7C,WAAW,EAAE,QAAQ,CAAC,2BAA2B,CAAC;aACnD;SACF;QACD;YACE,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,2BAA2B,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE;SACvE;QACD;YACE,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC;YAC3B,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,0BAA0B,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE;SACtE;KACF;CACF,CAAC,CAAA","sourcesContent":["import { collectionDefSchema } from '@elytracms/core/cms-core'\nimport type { CollectionDef } from '@elytracms/core/cms-core'\nimport { roleOptions } from '@elytracms/core/persistence'\nimport { msgLabel } from '@elytracms/studio/lib/i18n'\n\n/**\n * The **account-settings** field lens (EC-240 H-tail) — the schema the portable\n * edit shell renders when a member opens their OWN record (via the user menu). It\n * diverges from the admin `usersCollectionDef` in exactly the way the ratified\n * scope dictates:\n *\n * - **name / avatar are EDITABLE** (not `form.readOnly`) — the person edits their\n *   own identity; the source's `save` routes these to `AuthAdapter.updateProfile`\n *   (auth-owned), never the members rail.\n * - **email is read-only** (email change is a separate, deferred seam).\n * - **role is read-only** — you never change your own role (the server integrity\n *   floor also guards it).\n *\n * Avatar is a plain URL text field for now; the media-picker convention is a\n * deferred polish item — this keeps the mechanism (name + avatar → updateProfile)\n * honest and complete without a half-built picker.\n */\nexport const selfAccountCollectionDef: CollectionDef = collectionDefSchema.parse({\n  id: 'account',\n  kind: 'document',\n  titleField: 'name',\n  form: {\n    label: msgLabel('account.rail.label'),\n    labelSingular: msgLabel('account.rail.labelSingular'),\n  },\n  fields: [\n    { name: 'name', type: 'text', form: { label: msgLabel('account.field.name.label') } },\n    {\n      name: 'avatar',\n      type: 'text',\n      form: {\n        label: msgLabel('account.field.avatar.label'),\n        description: msgLabel('account.field.avatar.hint'),\n      },\n    },\n    {\n      name: 'email',\n      type: 'text',\n      form: { label: msgLabel('account.field.email.label'), readOnly: true },\n    },\n    {\n      name: 'role',\n      type: 'select',\n      options: [...roleOptions()],\n      form: { label: msgLabel('account.field.role.label'), readOnly: true },\n    },\n  ],\n})\n"]}

package/dist/components/account/self-account-view-source.d.ts

@@ -0,0 +1,35 @@
+import type { CmsDocument } from '@elytracms/core/cms-core';
+import type { UserRecord } from '@elytracms/core/persistence';
+import type { CollectionViewCapabilities, CollectionViewSource } from '@elytracms/studio/lib/collection-view/collection-view-source';
+/**
+ * The capability profile of the account surface (EC-240 H-tail): a single self
+ * record edited in place — no publish/versions/create/remove/import. The record
+ * is the caller's own; there is nothing to delete or list.
+ */
+export declare const ACCOUNT_CAPABILITIES: CollectionViewCapabilities;
+/** Project the self record into the account lens's `values`. */
+export declare function selfToDocument(record: UserRecord): CmsDocument;
+/**
+ * Compute the identity diff (name / avatar) an edited account document carries —
+ * the exact seam handed to `AuthAdapter.updateProfile`. Pure so the split-write is
+ * unit-testable: only the fields the person changed are sent (an empty diff is a
+ * no-op the caller can short-circuit). Never carries `email`/`role` — those are
+ * read-only on this surface and are not auth-adapter-writable here.
+ */
+export declare function accountIdentityDiff(doc: CmsDocument, previous: UserRecord): {
+    name?: string;
+    avatar?: string;
+};
+/**
+ * Assemble a {@link CollectionViewSource} for the **account-settings** surface
+ * (EC-240 H-tail). Reuses the portable edit shell over the caller's OWN record —
+ * name/avatar editable, email/role read-only (per the schema). The `save` routes
+ * the identity diff to `AuthAdapter.updateProfile` (auth-owned) — NOT the
+ * members-rail `users.save` — then refreshes the loaded record. `EDITABLE_IDENTITY`
+ * marks which fields the save may write; everything else is display-only.
+ */
+export declare function useSelfAccountViewSource(input: {
+    projectId: string;
+    self: UserRecord;
+    refresh: () => Promise<void>;
+}): CollectionViewSource;

package/dist/components/account/self-account-view-source.js

@@ -0,0 +1,110 @@
+import { useCallback } from 'react';
+import { studioPath } from '@elytracms/studio/router';
+import { useAuth } from '../auth-context';
+import { selfAccountCollectionDef } from './self-account-schema';
+import { normalizeOkResult, useRailViewSource } from '../rail-view-source';
+/** The account surface is not localized — one implicit locale keeps the lens honest. */
+const ACCOUNT_LOCALE = 'en';
+const ACCOUNT_LOCALE_CONFIG = { default: ACCOUNT_LOCALE, locales: [ACCOUNT_LOCALE] };
+/**
+ * The capability profile of the account surface (EC-240 H-tail): a single self
+ * record edited in place — no publish/versions/create/remove/import. The record
+ * is the caller's own; there is nothing to delete or list.
+ */
+export const ACCOUNT_CAPABILITIES = {
+    publish: false,
+    versions: false,
+    locales: false,
+    inlineEdit: false,
+    create: false,
+    remove: false,
+    bulk: false,
+    liveUrl: false,
+    hierarchy: false,
+    importExport: false,
+};
+/** Everything in `values` that is NOT an editable identity field is display-only. */
+const EDITABLE_IDENTITY = new Set(['name', 'avatar']);
+/** Project the self record into the account lens's `values`. */
+export function selfToDocument(record) {
+    return {
+        collection: selfAccountCollectionDef.id,
+        id: record.id,
+        values: {
+            name: record.name ?? '',
+            avatar: record.avatar ?? '',
+            email: record.email,
+            role: record.roles[0] ?? 'viewer',
+        },
+    };
+}
+/**
+ * Compute the identity diff (name / avatar) an edited account document carries —
+ * the exact seam handed to `AuthAdapter.updateProfile`. Pure so the split-write is
+ * unit-testable: only the fields the person changed are sent (an empty diff is a
+ * no-op the caller can short-circuit). Never carries `email`/`role` — those are
+ * read-only on this surface and are not auth-adapter-writable here.
+ */
+export function accountIdentityDiff(doc, previous) {
+    const values = doc.values ?? {};
+    const diff = {};
+    const nextName = typeof values.name === 'string' ? values.name : '';
+    const nextAvatar = typeof values.avatar === 'string' ? values.avatar : '';
+    if (nextName !== (previous.name ?? ''))
+        diff.name = nextName;
+    if (nextAvatar !== (previous.avatar ?? ''))
+        diff.avatar = nextAvatar;
+    return diff;
+}
+/**
+ * Assemble a {@link CollectionViewSource} for the **account-settings** surface
+ * (EC-240 H-tail). Reuses the portable edit shell over the caller's OWN record —
+ * name/avatar editable, email/role read-only (per the schema). The `save` routes
+ * the identity diff to `AuthAdapter.updateProfile` (auth-owned) — NOT the
+ * members-rail `users.save` — then refreshes the loaded record. `EDITABLE_IDENTITY`
+ * marks which fields the save may write; everything else is display-only.
+ */
+export function useSelfAccountViewSource(input) {
+    const { projectId, self, refresh } = input;
+    const auth = useAuth();
+    const documents = useCallback(() => [selfToDocument(self)], [self]);
+    const get = useCallback((ref) => ref.id === self.id ? selfToDocument(self) : undefined, [self]);
+    const titleOf = useCallback(() => self.name || self.email || self.id, [self]);
+    const save = useCallback(async (doc) => {
+        const diff = accountIdentityDiff(doc, self);
+        // No identity change (e.g. a read-only-only edit) → nothing to write.
+        if (diff.name === undefined && diff.avatar === undefined)
+            return { ok: true };
+        const result = await auth.updateProfile(diff);
+        if (!result.ok)
+            return { ok: false, message: result.message };
+        // Reflect the new identity in the loaded record (session already refreshed).
+        await refresh();
+        return { ok: true };
+    }, [auth, self, refresh]);
+    const noRemove = useCallback(async () => ({ ok: true }), []);
+    const noValidation = useCallback(() => [], []);
+    const createUnsupported = useCallback(() => {
+        throw new Error('the account surface has no create');
+    }, []);
+    return useRailViewSource({
+        projectId,
+        schema: selfAccountCollectionDef,
+        capabilities: ACCOUNT_CAPABILITIES,
+        localeConfig: ACCOUNT_LOCALE_CONFIG,
+        documents,
+        get,
+        titleOf,
+        // Editable-identity fields drive writability; the rest are read-only per schema.
+        isFieldReadOnly: (field) => !EDITABLE_IDENTITY.has(field.name) || (field.form?.readOnly ?? false),
+        detailPath: (id) => studioPath.user(id),
+        listPath: studioPath.users(),
+        validate: noValidation,
+        create: createUnsupported,
+        save,
+        remove: noRemove,
+        normalizeSaveResult: normalizeOkResult,
+        normalizeRemoveResult: () => null,
+    });
+}
+//# sourceMappingURL=self-account-view-source.js.map

package/dist/components/account/self-account-view-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"self-account-view-source.js","sourceRoot":"","sources":["../../../src/components/account/self-account-view-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,OAAO,CAAA;AAGnC,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AAMrD,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AACzC,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAA;AAChE,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAE1E,wFAAwF;AACxF,MAAM,cAAc,GAAW,IAAI,CAAA;AACnC,MAAM,qBAAqB,GAAiB,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,cAAc,CAAC,EAAE,CAAA;AAElG;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B;IAC9D,OAAO,EAAE,KAAK;IACd,QAAQ,EAAE,KAAK;IACf,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,MAAM,EAAE,KAAK;IACb,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,KAAK;IACX,OAAO,EAAE,KAAK;IACd,SAAS,EAAE,KAAK;IAChB,YAAY,EAAE,KAAK;CACpB,CAAA;AAED,qFAAqF;AACrF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAA;AAErD,gEAAgE;AAChE,MAAM,UAAU,cAAc,CAAC,MAAkB;IAC/C,OAAO;QACL,UAAU,EAAE,wBAAwB,CAAC,EAAE;QACvC,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,MAAM,EAAE;YACN,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;YAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,QAAQ;SAClC;KACF,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,GAAgB,EAChB,QAAoB;IAEpB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAA;IAC/B,MAAM,IAAI,GAAuC,EAAE,CAAA;IACnD,MAAM,QAAQ,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;IACnE,MAAM,UAAU,GAAG,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;IACzE,IAAI,QAAQ,KAAK,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC;QAAE,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAA;IAC5D,IAAI,UAAU,KAAK,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC;QAAE,IAAI,CAAC,MAAM,GAAG,UAAU,CAAA;IACpE,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAIxC;IACC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAA;IAC1C,MAAM,IAAI,GAAG,OAAO,EAAE,CAAA;IAEtB,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA;IACnE,MAAM,GAAG,GAAG,WAAW,CACrB,CAAC,GAAgB,EAA2B,EAAE,CAC5C,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,EACvD,CAAC,IAAI,CAAC,CACP,CAAA;IACD,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA;IAE7E,MAAM,IAAI,GAAG,WAAW,CACtB,KAAK,EAAE,GAAgB,EAA0D,EAAE;QACjF,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QAC3C,sEAAsE;QACtE,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;QAC7E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAA;QAC7C,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAA;QAC7D,6EAA6E;QAC7E,MAAM,OAAO,EAAE,CAAA;QACf,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;IACrB,CAAC,EACD,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CACtB,CAAA;IAED,MAAM,QAAQ,GAAG,WAAW,CAC1B,KAAK,IAA2B,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EACjD,EAAE,CACH,CAAA;IACD,MAAM,YAAY,GAAG,WAAW,CAAC,GAAyB,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;IACpE,MAAM,iBAAiB,GAAG,WAAW,CAAC,GAAgB,EAAE;QACtD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;IACtD,CAAC,EAAE,EAAE,CAAC,CAAA;IAEN,OAAO,iBAAiB,CAAC;QACvB,SAAS;QACT,MAAM,EAAE,wBAAwB;QAChC,YAAY,EAAE,oBAAoB;QAClC,YAAY,EAAE,qBAAqB;QACnC,SAAS;QACT,GAAG;QACH,OAAO;QACP,iFAAiF;QACjF,eAAe,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,IAAI,KAAK,CAAC;QACjG,UAAU,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,QAAQ,EAAE,UAAU,CAAC,KAAK,EAAE;QAC5B,QAAQ,EAAE,YAAY;QACtB,MAAM,EAAE,iBAAiB;QACzB,IAAI;QACJ,MAAM,EAAE,QAAQ;QAChB,mBAAmB,EAAE,iBAAiB;QACtC,qBAAqB,EAAE,GAA0B,EAAE,CAAC,IAAI;KACzD,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import { useCallback } from 'react'\nimport type { CmsDocument, CmsValidationIssue, DocumentRef, Locale, LocaleConfig } from '@elytracms/core/cms-core'\nimport type { UserRecord } from '@elytracms/core/persistence'\nimport { studioPath } from '@elytracms/studio/router'\nimport type {\n  CollectionViewCapabilities,\n  CollectionViewSource,\n} from '@elytracms/studio/lib/collection-view/collection-view-source'\nimport type { OperationError } from '@elytracms/core/operations'\nimport { useAuth } from '../auth-context'\nimport { selfAccountCollectionDef } from './self-account-schema'\nimport { normalizeOkResult, useRailViewSource } from '../rail-view-source'\n\n/** The account surface is not localized — one implicit locale keeps the lens honest. */\nconst ACCOUNT_LOCALE: Locale = 'en'\nconst ACCOUNT_LOCALE_CONFIG: LocaleConfig = { default: ACCOUNT_LOCALE, locales: [ACCOUNT_LOCALE] }\n\n/**\n * The capability profile of the account surface (EC-240 H-tail): a single self\n * record edited in place — no publish/versions/create/remove/import. The record\n * is the caller's own; there is nothing to delete or list.\n */\nexport const ACCOUNT_CAPABILITIES: CollectionViewCapabilities = {\n  publish: false,\n  versions: false,\n  locales: false,\n  inlineEdit: false,\n  create: false,\n  remove: false,\n  bulk: false,\n  liveUrl: false,\n  hierarchy: false,\n  importExport: false,\n}\n\n/** Everything in `values` that is NOT an editable identity field is display-only. */\nconst EDITABLE_IDENTITY = new Set(['name', 'avatar'])\n\n/** Project the self record into the account lens's `values`. */\nexport function selfToDocument(record: UserRecord): CmsDocument {\n  return {\n    collection: selfAccountCollectionDef.id,\n    id: record.id,\n    values: {\n      name: record.name ?? '',\n      avatar: record.avatar ?? '',\n      email: record.email,\n      role: record.roles[0] ?? 'viewer',\n    },\n  }\n}\n\n/**\n * Compute the identity diff (name / avatar) an edited account document carries —\n * the exact seam handed to `AuthAdapter.updateProfile`. Pure so the split-write is\n * unit-testable: only the fields the person changed are sent (an empty diff is a\n * no-op the caller can short-circuit). Never carries `email`/`role` — those are\n * read-only on this surface and are not auth-adapter-writable here.\n */\nexport function accountIdentityDiff(\n  doc: CmsDocument,\n  previous: UserRecord,\n): { name?: string; avatar?: string } {\n  const values = doc.values ?? {}\n  const diff: { name?: string; avatar?: string } = {}\n  const nextName = typeof values.name === 'string' ? values.name : ''\n  const nextAvatar = typeof values.avatar === 'string' ? values.avatar : ''\n  if (nextName !== (previous.name ?? '')) diff.name = nextName\n  if (nextAvatar !== (previous.avatar ?? '')) diff.avatar = nextAvatar\n  return diff\n}\n\n/**\n * Assemble a {@link CollectionViewSource} for the **account-settings** surface\n * (EC-240 H-tail). Reuses the portable edit shell over the caller's OWN record —\n * name/avatar editable, email/role read-only (per the schema). The `save` routes\n * the identity diff to `AuthAdapter.updateProfile` (auth-owned) — NOT the\n * members-rail `users.save` — then refreshes the loaded record. `EDITABLE_IDENTITY`\n * marks which fields the save may write; everything else is display-only.\n */\nexport function useSelfAccountViewSource(input: {\n  projectId: string\n  self: UserRecord\n  refresh: () => Promise<void>\n}): CollectionViewSource {\n  const { projectId, self, refresh } = input\n  const auth = useAuth()\n\n  const documents = useCallback(() => [selfToDocument(self)], [self])\n  const get = useCallback(\n    (ref: DocumentRef): CmsDocument | undefined =>\n      ref.id === self.id ? selfToDocument(self) : undefined,\n    [self],\n  )\n  const titleOf = useCallback(() => self.name || self.email || self.id, [self])\n\n  const save = useCallback(\n    async (doc: CmsDocument): Promise<{ ok: true } | { ok: false; message: string }> => {\n      const diff = accountIdentityDiff(doc, self)\n      // No identity change (e.g. a read-only-only edit) → nothing to write.\n      if (diff.name === undefined && diff.avatar === undefined) return { ok: true }\n      const result = await auth.updateProfile(diff)\n      if (!result.ok) return { ok: false, message: result.message }\n      // Reflect the new identity in the loaded record (session already refreshed).\n      await refresh()\n      return { ok: true }\n    },\n    [auth, self, refresh],\n  )\n\n  const noRemove = useCallback(\n    async (): Promise<{ ok: true }> => ({ ok: true }),\n    [],\n  )\n  const noValidation = useCallback((): CmsValidationIssue[] => [], [])\n  const createUnsupported = useCallback((): DocumentRef => {\n    throw new Error('the account surface has no create')\n  }, [])\n\n  return useRailViewSource({\n    projectId,\n    schema: selfAccountCollectionDef,\n    capabilities: ACCOUNT_CAPABILITIES,\n    localeConfig: ACCOUNT_LOCALE_CONFIG,\n    documents,\n    get,\n    titleOf,\n    // Editable-identity fields drive writability; the rest are read-only per schema.\n    isFieldReadOnly: (field) => !EDITABLE_IDENTITY.has(field.name) || (field.form?.readOnly ?? false),\n    detailPath: (id: string) => studioPath.user(id),\n    listPath: studioPath.users(),\n    validate: noValidation,\n    create: createUnsupported,\n    save,\n    remove: noRemove,\n    normalizeSaveResult: normalizeOkResult,\n    normalizeRemoveResult: (): OperationError | null => null,\n  })\n}\n"]}

package/dist/components/auth-context.d.ts

@@ -1,6 +1,6 @@
 import type { ReactNode } from 'react';
 import type { ProjectRole } from '@elytracms/core/persistence';
-import type { AuthAdapter, AuthSession, AuthStatus, SignInResult } from '@elytracms/studio/lib/auth';
+import type { AuthAdapter, AuthSession, AuthStatus, ChangePasswordInput, ChangePasswordResult, SignInResult, UpdateProfileInput, UpdateProfileResult } from '@elytracms/studio/lib/auth';
 /**
  * Session store (EC-150). Owns the one `AuthAdapter` the app talks to, keeps
  * the session in React state, and binds/unbinds the operations-layer principal
@@ -15,6 +15,10 @@ export interface AuthStore {
     /** Register the first/new user on the active backend, then sign in (EC-179). */
     signUp(email: string, password: string): Promise<SignInResult>;
     signOut(): Promise<void>;
+    /** Edit the signed-in user's OWN name/avatar (EC-240 H-tail); refreshes the session. */
+    updateProfile(input: UpdateProfileInput): Promise<UpdateProfileResult>;
+    /** Change the signed-in user's OWN password (EC-240 H-tail); provider-delegated. */
+    changePassword(input: ChangePasswordInput): Promise<ChangePasswordResult>;
 }
 declare const useAuth: () => AuthStore;
 export interface AuthProviderProps {

package/dist/components/auth-context.js

@@ -46,6 +46,15 @@ export function AuthProvider({ children, adapter }) {
             await auth.signOut();
             apply(null);
         },
+        updateProfile: async (input) => {
+            const result = await auth.updateProfile(input);
+            // A successful identity edit refreshes the session so the shell (and the
+            // account surface) reflect the new name immediately.
+            if (result.ok)
+                apply(result.session);
+            return result;
+        },
+        changePassword: (input) => auth.changePassword(input),
     }), [auth, status, session, apply]);
     return _jsx(AuthContext.Provider, { value: store, children: children });
 }

package/dist/components/auth-context.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth-context.js","sourceRoot":"","sources":["../../src/components/auth-context.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAG7E,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAA;AAEhF,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAA;AAmB9E,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,qBAAqB,CAAY,MAAM,EAAE;IAC9F,OAAO,EAAE,IAAI;CACd,CAAC,CAAA;AAQF,MAAM,UAAU,YAAY,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAqB;IACnE,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAc,GAAG,EAAE,CAAC,OAAO,IAAI,iBAAiB,EAAE,CAAC,CAAA;IAC1E,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAa,SAAS,CAAC,CAAA;IAC3D,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAqB,IAAI,CAAC,CAAA;IAEhE,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,IAAwB,EAAE,EAAE;QACrD,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QACtD,UAAU,CAAC,IAAI,CAAC,CAAA;QAChB,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,CAAA;IAC9C,CAAC,EAAE,EAAE,CAAC,CAAA;IAEN,4EAA4E;IAC5E,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,SAAS,GAAG,KAAK,CAAA;QACrB,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;YAC3C,IAAI,CAAC,SAAS;gBAAE,KAAK,CAAC,QAAQ,CAAC,CAAA;QACjC,CAAC,CAAC,CAAA;QACF,OAAO,GAAG,EAAE;YACV,SAAS,GAAG,IAAI,CAAA;QAClB,CAAC,CAAA;IACH,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAA;IAEjB,MAAM,KAAK,GAAG,OAAO,CACnB,GAAG,EAAE,CAAC,CAAC;QACL,MAAM;QACN,OAAO;QACP,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;YAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;YACrD,IAAI,MAAM,CAAC,EAAE;gBAAE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;YACpC,OAAO,MAAM,CAAA;QACf,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;YAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;YACrD,IAAI,MAAM,CAAC,EAAE;gBAAE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;YACpC,OAAO,MAAM,CAAA;QACf,CAAC;QACD,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,MAAM,IAAI,CAAC,OAAO,EAAE,CAAA;YACpB,KAAK,CAAC,IAAI,CAAC,CAAA;QACb,CAAC;KACF,CAAC,EACF,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAC/B,CAAA;IAED,OAAO,KAAC,WAAW,CAAC,QAAQ,IAAC,KAAK,EAAE,KAAK,YAAG,QAAQ,GAAwB,CAAA;AAC9E,CAAC;AAED,OAAO,EAAE,OAAO,EAAE,CAAA;AAElB;;;;;GAKG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO,UAAU,CAAC,WAAW,CAAC,CAAA;AAChC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,SAAwB;IACrD,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,EAAE,CAAA;IAC7B,MAAM,MAAM,GAAG,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI,CAAA;IACvC,MAAM,KAAK,GAAG,iBAAiB,CAAqB;QAClD,QAAQ,EAAE,CAAC,aAAa,EAAE,SAAS,IAAI,GAAG,EAAE,MAAM,IAAI,GAAG,CAAC;QAC1D,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE;YAC3B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC;gBAC3C,SAAS,EAAE,SAAmB;gBAC9B,MAAM,EAAE,MAAgB;aACzB,CAAC,CAAA;YACF,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QACxD,CAAC;QACD,YAAY,EAAE,CAAC,SAAS,CAAC;QACzB,OAAO,EAAE,SAAS,KAAK,IAAI,IAAI,MAAM,KAAK,IAAI;KAC/C,CAAC,CAAA;IACF,OAAO,KAAK,CAAC,IAAI,IAAI,IAAI,CAAA;AAC3B,CAAC","sourcesContent":["import { useCallback, useContext, useEffect, useMemo, useState } from 'react'\nimport type { ReactNode } from 'react'\nimport type { ProjectRole } from '@elytracms/core/persistence'\nimport { selectAuthAdapter, sessionPrincipal } from '@elytracms/studio/lib/auth'\nimport type { AuthAdapter, AuthSession, AuthStatus, SignInResult } from '@elytracms/studio/lib/auth'\nimport { setStudioSession } from '@elytracms/studio/lib/operations'\nimport { useOperationQuery } from '@elytracms/studio/lib/query'\nimport { createRequiredContext } from '@elytracms/studio/lib/required-context'\n\n/**\n * Session store (EC-150). Owns the one `AuthAdapter` the app talks to, keeps\n * the session in React state, and binds/unbinds the operations-layer principal\n * (`setStudioSession`) so every studio mutation runs through the role hook as\n * the signed-in user. Auth state machine: `loading` (restoring) →\n * `signed-in` | `signed-out` — all three are deterministic, renderable states.\n */\n\nexport interface AuthStore {\n  status: AuthStatus\n  session: AuthSession | null\n  signIn(email: string, password: string): Promise<SignInResult>\n  /** Register the first/new user on the active backend, then sign in (EC-179). */\n  signUp(email: string, password: string): Promise<SignInResult>\n  signOut(): Promise<void>\n}\n\nconst { Context: AuthContext, useRequired: useAuth } = createRequiredContext<AuthStore>('Auth', {\n  article: 'an',\n})\n\nexport interface AuthProviderProps {\n  children: ReactNode\n  /** Test seam: inject an adapter; defaults to `selectAuthAdapter()`. */\n  adapter?: AuthAdapter\n}\n\nexport function AuthProvider({ children, adapter }: AuthProviderProps) {\n  const [auth] = useState<AuthAdapter>(() => adapter ?? selectAuthAdapter())\n  const [status, setStatus] = useState<AuthStatus>('loading')\n  const [session, setSession] = useState<AuthSession | null>(null)\n\n  const apply = useCallback((next: AuthSession | null) => {\n    setStudioSession(next ? sessionPrincipal(next) : null)\n    setSession(next)\n    setStatus(next ? 'signed-in' : 'signed-out')\n  }, [])\n\n  // Restore the session once on the client (SSR renders the 'loading' state).\n  useEffect(() => {\n    let cancelled = false\n    void auth.currentSession().then((restored) => {\n      if (!cancelled) apply(restored)\n    })\n    return () => {\n      cancelled = true\n    }\n  }, [auth, apply])\n\n  const store = useMemo<AuthStore>(\n    () => ({\n      status,\n      session,\n      signIn: async (email, password) => {\n        const result = await auth.signIn({ email, password })\n        if (result.ok) apply(result.session)\n        return result\n      },\n      signUp: async (email, password) => {\n        const result = await auth.signUp({ email, password })\n        if (result.ok) apply(result.session)\n        return result\n      },\n      signOut: async () => {\n        await auth.signOut()\n        apply(null)\n      },\n    }),\n    [auth, status, session, apply],\n  )\n\n  return <AuthContext.Provider value={store}>{children}</AuthContext.Provider>\n}\n\nexport { useAuth }\n\n/**\n * Like {@link useAuth}, but tolerant of provider-less renders. For shared\n * leaf surfaces (e.g. the operation-error banner's \"Sign in again\" action)\n * that are also rendered standalone in tests/styleguides: they degrade\n * gracefully instead of demanding the full provider tree.\n */\nexport function useOptionalAuth(): AuthStore | null {\n  return useContext(AuthContext)\n}\n\n/**\n * The signed-in user's role on a project (for the shell's role badge).\n * Read through the one operations-backed query cache (EC-308/AD-17) via the\n * `members.find` query — no longer reaching past the spine into\n * `adapter.members` — and re-read when membership changes. `null` while loading\n * or when the user is not a member.\n */\nexport function useProjectRole(projectId: string | null): ProjectRole | null {\n  const { session } = useAuth()\n  const userId = session?.user.id ?? null\n  const query = useOperationQuery<ProjectRole | null>({\n    queryKey: ['projectRole', projectId ?? '∅', userId ?? '∅'],\n    loader: async (operations) => {\n      const result = await operations.members.find({\n        projectId: projectId as string,\n        userId: userId as string,\n      })\n      return result.ok ? (result.value?.role ?? null) : null\n    },\n    invalidateOn: ['members'],\n    enabled: projectId !== null && userId !== null,\n  })\n  return query.data ?? null\n}\n"]}
+{"version":3,"file":"auth-context.js","sourceRoot":"","sources":["../../src/components/auth-context.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAG7E,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAA;AAWhF,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAA;AAuB9E,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,qBAAqB,CAAY,MAAM,EAAE;IAC9F,OAAO,EAAE,IAAI;CACd,CAAC,CAAA;AAQF,MAAM,UAAU,YAAY,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAqB;IACnE,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAc,GAAG,EAAE,CAAC,OAAO,IAAI,iBAAiB,EAAE,CAAC,CAAA;IAC1E,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAa,SAAS,CAAC,CAAA;IAC3D,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAqB,IAAI,CAAC,CAAA;IAEhE,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,IAAwB,EAAE,EAAE;QACrD,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QACtD,UAAU,CAAC,IAAI,CAAC,CAAA;QAChB,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,CAAA;IAC9C,CAAC,EAAE,EAAE,CAAC,CAAA;IAEN,4EAA4E;IAC5E,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,SAAS,GAAG,KAAK,CAAA;QACrB,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;YAC3C,IAAI,CAAC,SAAS;gBAAE,KAAK,CAAC,QAAQ,CAAC,CAAA;QACjC,CAAC,CAAC,CAAA;QACF,OAAO,GAAG,EAAE;YACV,SAAS,GAAG,IAAI,CAAA;QAClB,CAAC,CAAA;IACH,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAA;IAEjB,MAAM,KAAK,GAAG,OAAO,CACnB,GAAG,EAAE,CAAC,CAAC;QACL,MAAM;QACN,OAAO;QACP,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;YAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;YACrD,IAAI,MAAM,CAAC,EAAE;gBAAE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;YACpC,OAAO,MAAM,CAAA;QACf,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;YAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;YACrD,IAAI,MAAM,CAAC,EAAE;gBAAE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;YACpC,OAAO,MAAM,CAAA;QACf,CAAC;QACD,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,MAAM,IAAI,CAAC,OAAO,EAAE,CAAA;YACpB,KAAK,CAAC,IAAI,CAAC,CAAA;QACb,CAAC;QACD,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YAC7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;YAC9C,yEAAyE;YACzE,qDAAqD;YACrD,IAAI,MAAM,CAAC,EAAE;gBAAE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;YACpC,OAAO,MAAM,CAAA;QACf,CAAC;QACD,cAAc,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC;KACtD,CAAC,EACF,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAC/B,CAAA;IAED,OAAO,KAAC,WAAW,CAAC,QAAQ,IAAC,KAAK,EAAE,KAAK,YAAG,QAAQ,GAAwB,CAAA;AAC9E,CAAC;AAED,OAAO,EAAE,OAAO,EAAE,CAAA;AAElB;;;;;GAKG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO,UAAU,CAAC,WAAW,CAAC,CAAA;AAChC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,SAAwB;IACrD,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,EAAE,CAAA;IAC7B,MAAM,MAAM,GAAG,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI,CAAA;IACvC,MAAM,KAAK,GAAG,iBAAiB,CAAqB;QAClD,QAAQ,EAAE,CAAC,aAAa,EAAE,SAAS,IAAI,GAAG,EAAE,MAAM,IAAI,GAAG,CAAC;QAC1D,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE;YAC3B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC;gBAC3C,SAAS,EAAE,SAAmB;gBAC9B,MAAM,EAAE,MAAgB;aACzB,CAAC,CAAA;YACF,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QACxD,CAAC;QACD,YAAY,EAAE,CAAC,SAAS,CAAC;QACzB,OAAO,EAAE,SAAS,KAAK,IAAI,IAAI,MAAM,KAAK,IAAI;KAC/C,CAAC,CAAA;IACF,OAAO,KAAK,CAAC,IAAI,IAAI,IAAI,CAAA;AAC3B,CAAC","sourcesContent":["import { useCallback, useContext, useEffect, useMemo, useState } from 'react'\nimport type { ReactNode } from 'react'\nimport type { ProjectRole } from '@elytracms/core/persistence'\nimport { selectAuthAdapter, sessionPrincipal } from '@elytracms/studio/lib/auth'\nimport type {\n  AuthAdapter,\n  AuthSession,\n  AuthStatus,\n  ChangePasswordInput,\n  ChangePasswordResult,\n  SignInResult,\n  UpdateProfileInput,\n  UpdateProfileResult,\n} from '@elytracms/studio/lib/auth'\nimport { setStudioSession } from '@elytracms/studio/lib/operations'\nimport { useOperationQuery } from '@elytracms/studio/lib/query'\nimport { createRequiredContext } from '@elytracms/studio/lib/required-context'\n\n/**\n * Session store (EC-150). Owns the one `AuthAdapter` the app talks to, keeps\n * the session in React state, and binds/unbinds the operations-layer principal\n * (`setStudioSession`) so every studio mutation runs through the role hook as\n * the signed-in user. Auth state machine: `loading` (restoring) →\n * `signed-in` | `signed-out` — all three are deterministic, renderable states.\n */\n\nexport interface AuthStore {\n  status: AuthStatus\n  session: AuthSession | null\n  signIn(email: string, password: string): Promise<SignInResult>\n  /** Register the first/new user on the active backend, then sign in (EC-179). */\n  signUp(email: string, password: string): Promise<SignInResult>\n  signOut(): Promise<void>\n  /** Edit the signed-in user's OWN name/avatar (EC-240 H-tail); refreshes the session. */\n  updateProfile(input: UpdateProfileInput): Promise<UpdateProfileResult>\n  /** Change the signed-in user's OWN password (EC-240 H-tail); provider-delegated. */\n  changePassword(input: ChangePasswordInput): Promise<ChangePasswordResult>\n}\n\nconst { Context: AuthContext, useRequired: useAuth } = createRequiredContext<AuthStore>('Auth', {\n  article: 'an',\n})\n\nexport interface AuthProviderProps {\n  children: ReactNode\n  /** Test seam: inject an adapter; defaults to `selectAuthAdapter()`. */\n  adapter?: AuthAdapter\n}\n\nexport function AuthProvider({ children, adapter }: AuthProviderProps) {\n  const [auth] = useState<AuthAdapter>(() => adapter ?? selectAuthAdapter())\n  const [status, setStatus] = useState<AuthStatus>('loading')\n  const [session, setSession] = useState<AuthSession | null>(null)\n\n  const apply = useCallback((next: AuthSession | null) => {\n    setStudioSession(next ? sessionPrincipal(next) : null)\n    setSession(next)\n    setStatus(next ? 'signed-in' : 'signed-out')\n  }, [])\n\n  // Restore the session once on the client (SSR renders the 'loading' state).\n  useEffect(() => {\n    let cancelled = false\n    void auth.currentSession().then((restored) => {\n      if (!cancelled) apply(restored)\n    })\n    return () => {\n      cancelled = true\n    }\n  }, [auth, apply])\n\n  const store = useMemo<AuthStore>(\n    () => ({\n      status,\n      session,\n      signIn: async (email, password) => {\n        const result = await auth.signIn({ email, password })\n        if (result.ok) apply(result.session)\n        return result\n      },\n      signUp: async (email, password) => {\n        const result = await auth.signUp({ email, password })\n        if (result.ok) apply(result.session)\n        return result\n      },\n      signOut: async () => {\n        await auth.signOut()\n        apply(null)\n      },\n      updateProfile: async (input) => {\n        const result = await auth.updateProfile(input)\n        // A successful identity edit refreshes the session so the shell (and the\n        // account surface) reflect the new name immediately.\n        if (result.ok) apply(result.session)\n        return result\n      },\n      changePassword: (input) => auth.changePassword(input),\n    }),\n    [auth, status, session, apply],\n  )\n\n  return <AuthContext.Provider value={store}>{children}</AuthContext.Provider>\n}\n\nexport { useAuth }\n\n/**\n * Like {@link useAuth}, but tolerant of provider-less renders. For shared\n * leaf surfaces (e.g. the operation-error banner's \"Sign in again\" action)\n * that are also rendered standalone in tests/styleguides: they degrade\n * gracefully instead of demanding the full provider tree.\n */\nexport function useOptionalAuth(): AuthStore | null {\n  return useContext(AuthContext)\n}\n\n/**\n * The signed-in user's role on a project (for the shell's role badge).\n * Read through the one operations-backed query cache (EC-308/AD-17) via the\n * `members.find` query — no longer reaching past the spine into\n * `adapter.members` — and re-read when membership changes. `null` while loading\n * or when the user is not a member.\n */\nexport function useProjectRole(projectId: string | null): ProjectRole | null {\n  const { session } = useAuth()\n  const userId = session?.user.id ?? null\n  const query = useOperationQuery<ProjectRole | null>({\n    queryKey: ['projectRole', projectId ?? '∅', userId ?? '∅'],\n    loader: async (operations) => {\n      const result = await operations.members.find({\n        projectId: projectId as string,\n        userId: userId as string,\n      })\n      return result.ok ? (result.value?.role ?? null) : null\n    },\n    invalidateOn: ['members'],\n    enabled: projectId !== null && userId !== null,\n  })\n  return query.data ?? null\n}\n"]}

package/dist/components/current-user-menu.js

@@ -1,7 +1,8 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { LogOut, Moon, Settings, Sun } from 'lucide-react';
 import { roleGrantsCapability } from '@elytracms/core/persistence';
-import { Avatar, Badge, Button, DropdownMenu, DropdownMenuContent, DropdownMenuItem, DropdownMenuSeparator, DropdownMenuTrigger, Row, Spacer, Stack, Text, } from '@elytracms/studio/ui';
+import { Avatar, Badge, Button, DropdownMenu, DropdownMenuContent, DropdownMenuItem, DropdownMenuSeparator, DropdownMenuTrigger, Row, Stack, Text, } from '@elytracms/studio/ui';
+import { STUDIO_PROJECT_ROUTE, studioPath, useNavigate } from '@elytracms/studio/router';
 import { useT } from '@elytracms/studio/lib/i18n';
 import { useAuth, useProjectRole } from './auth-context';
 import { useTheme } from './theme-context';
@@ -15,6 +16,7 @@ export function CurrentUserMenu({ projectId }) {
     const auth = useAuth();
     const role = useProjectRole(projectId);
     const { theme, setTheme } = useTheme();
+    const navigate = useNavigate();
     const t = useT();
     const user = auth.session?.user;
     if (!user)
@@ -25,7 +27,14 @@ export function CurrentUserMenu({ projectId }) {
     return (_jsxs(DropdownMenu, { children: [_jsx(DropdownMenuTrigger, { asChild: true, children: _jsx(Button, { variant: "ghost", size: "icon-sm", className: "rounded-full", "aria-label": t('userMenu.accountMenu'), children: _jsx(Avatar, { label: displayName, size: "sm" }) }) }), _jsxs(DropdownMenuContent, { align: "end", className: "min-w-60", children: [_jsxs(Row, { gap: "2", className: "px-2 py-2", children: [_jsx(Avatar, { label: displayName, size: "md" }), _jsxs(Stack, { gap: "1", className: "min-w-0 flex-1", children: [_jsx(Text, { size: "sm", weight: "medium", className: "truncate leading-tight", children: displayName }), role ? (_jsx(Row, { children: _jsx(RoleBadge, { role: role }) })) : null] })] }), _jsx(DropdownMenuSeparator, {}), _jsxs(DropdownMenuItem, { onSelect: (event) => {
                             event.preventDefault();
                             setTheme(isDark ? 'light' : 'dark');
-                        }, children: [isDark ? _jsx(Sun, {}) : _jsx(Moon, {}), isDark ? t('userMenu.lightMode') : t('userMenu.darkMode')] }), _jsxs(DropdownMenuItem, { disabled: true, children: [_jsx(Settings, {}), t('userMenu.accountSettings'), _jsx(Spacer, {}), _jsx(Badge, { variant: "outline", children: t('userMenu.soon') })] }), _jsx(DropdownMenuSeparator, {}), _jsxs(DropdownMenuItem, { variant: "destructive", onSelect: () => void auth.signOut(), children: [_jsx(LogOut, {}), t('userMenu.signOut')] })] })] }));
+                        }, children: [isDark ? _jsx(Sun, {}) : _jsx(Moon, {}), isDark ? t('userMenu.lightMode') : t('userMenu.darkMode')] }), _jsxs(DropdownMenuItem, { disabled: !projectId, onSelect: () => {
+                            if (projectId) {
+                                void navigate({
+                                    to: STUDIO_PROJECT_ROUTE,
+                                    params: { projectId, _splat: studioPath.user(user.id) },
+                                });
+                            }
+                        }, children: [_jsx(Settings, {}), t('userMenu.accountSettings')] }), _jsx(DropdownMenuSeparator, {}), _jsxs(DropdownMenuItem, { variant: "destructive", onSelect: () => void auth.signOut(), children: [_jsx(LogOut, {}), t('userMenu.signOut')] })] })] }));
 }
 export function RoleBadge({ role }) {
     // Variant by capability tier (EC-240c), not role literals — a custom role set

package/dist/components/current-user-menu.js.map

@@ -1 +1 @@
-{"version":3,"file":"current-user-menu.js","sourceRoot":"","sources":["../../src/components/current-user-menu.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,cAAc,CAAA;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAA;AAElE,OAAO,EACL,MAAM,EACN,KAAK,EACL,MAAM,EACN,YAAY,EACZ,mBAAmB,EACnB,gBAAgB,EAChB,qBAAqB,EACrB,mBAAmB,EACnB,GAAG,EACH,MAAM,EACN,KAAK,EACL,IAAI,GACL,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,4BAA4B,CAAA;AACjD,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAE1C;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,EAAE,SAAS,EAAgC;IACzE,MAAM,IAAI,GAAG,OAAO,EAAE,CAAA;IACtB,MAAM,IAAI,GAAG,cAAc,CAAC,SAAS,CAAC,CAAA;IACtC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,QAAQ,EAAE,CAAA;IACtC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAA;IAChB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,CAAA;IAC/B,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IAEtB,8EAA8E;IAC9E,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAA;IAC3C,MAAM,MAAM,GAAG,KAAK,KAAK,MAAM,CAAA;IAE/B,OAAO,CACL,MAAC,YAAY,eACX,KAAC,mBAAmB,IAAC,OAAO,kBAC1B,KAAC,MAAM,IAAC,OAAO,EAAC,OAAO,EAAC,IAAI,EAAC,SAAS,EAAC,SAAS,EAAC,cAAc,gBAAa,CAAC,CAAC,sBAAsB,CAAC,YACnG,KAAC,MAAM,IAAC,KAAK,EAAE,WAAW,EAAE,IAAI,EAAC,IAAI,GAAG,GACjC,GACW,EACtB,MAAC,mBAAmB,IAAC,KAAK,EAAC,KAAK,EAAC,SAAS,EAAC,UAAU,aAEnD,MAAC,GAAG,IAAC,GAAG,EAAC,GAAG,EAAC,SAAS,EAAC,WAAW,aAChC,KAAC,MAAM,IAAC,KAAK,EAAE,WAAW,EAAE,IAAI,EAAC,IAAI,GAAG,EACxC,MAAC,KAAK,IAAC,GAAG,EAAC,GAAG,EAAC,SAAS,EAAC,gBAAgB,aACvC,KAAC,IAAI,IAAC,IAAI,EAAC,IAAI,EAAC,MAAM,EAAC,QAAQ,EAAC,SAAS,EAAC,wBAAwB,YAC/D,WAAW,GACP,EACN,IAAI,CAAC,CAAC,CAAC,CACN,KAAC,GAAG,cACF,KAAC,SAAS,IAAC,IAAI,EAAE,IAAI,GAAI,GACrB,CACP,CAAC,CAAC,CAAC,IAAI,IACF,IACJ,EACN,KAAC,qBAAqB,KAAG,EAEzB,MAAC,gBAAgB,IACf,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;4BAClB,KAAK,CAAC,cAAc,EAAE,CAAA;4BACtB,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;wBACrC,CAAC,aAEA,MAAM,CAAC,CAAC,CAAC,KAAC,GAAG,KAAG,CAAC,CAAC,CAAC,KAAC,IAAI,KAAG,EAC3B,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,IACzC,EAGnB,MAAC,gBAAgB,IAAC,QAAQ,mBACxB,KAAC,QAAQ,KAAG,EACX,CAAC,CAAC,0BAA0B,CAAC,EAC9B,KAAC,MAAM,KAAG,EACV,KAAC,KAAK,IAAC,OAAO,EAAC,SAAS,YAAE,CAAC,CAAC,eAAe,CAAC,GAAS,IACpC,EACnB,KAAC,qBAAqB,KAAG,EACzB,MAAC,gBAAgB,IAAC,OAAO,EAAC,aAAa,EAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,OAAO,EAAE,aACzE,KAAC,MAAM,KAAG,EACT,CAAC,CAAC,kBAAkB,CAAC,IACL,IACC,IACT,CAChB,CAAA;AACH,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,EAAE,IAAI,EAAyB;IACvD,8EAA8E;IAC9E,8EAA8E;IAC9E,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,EAAE,oBAAoB,CAAC;QAC9D,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,oBAAoB,CAAC,IAAI,EAAE,eAAe,CAAC;YAC3C,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,SAAS,CAAA;IACf,OAAO,KAAC,KAAK,IAAC,OAAO,EAAE,OAAO,YAAG,IAAI,GAAS,CAAA;AAChD,CAAC","sourcesContent":["import { LogOut, Moon, Settings, Sun } from 'lucide-react'\nimport { roleGrantsCapability } from '@elytracms/core/persistence'\nimport type { ProjectRole } from '@elytracms/core/persistence'\nimport {\n  Avatar,\n  Badge,\n  Button,\n  DropdownMenu,\n  DropdownMenuContent,\n  DropdownMenuItem,\n  DropdownMenuSeparator,\n  DropdownMenuTrigger,\n  Row,\n  Spacer,\n  Stack,\n  Text,\n} from '@elytracms/studio/ui'\nimport { useT } from '@elytracms/studio/lib/i18n'\nimport { useAuth, useProjectRole } from './auth-context'\nimport { useTheme } from './theme-context'\n\n/**\n * Current-user affordance in the shell header (EC-150): who is signed in,\n * their role on the active project (badge), theme switch, and sign-out. Role\n * display is informational — actual enforcement happens at the operations\n * chokepoint and server-side, never in the UI.\n */\nexport function CurrentUserMenu({ projectId }: { projectId: string | null }) {\n  const auth = useAuth()\n  const role = useProjectRole(projectId)\n  const { theme, setTheme } = useTheme()\n  const t = useT()\n  const user = auth.session?.user\n  if (!user) return null\n\n  // Show one identity line — the name if set, otherwise the email (never both).\n  const displayName = user.name ?? user.email\n  const isDark = theme === 'dark'\n\n  return (\n    <DropdownMenu>\n      <DropdownMenuTrigger asChild>\n        <Button variant=\"ghost\" size=\"icon-sm\" className=\"rounded-full\" aria-label={t('userMenu.accountMenu')}>\n          <Avatar label={displayName} size=\"sm\" />\n        </Button>\n      </DropdownMenuTrigger>\n      <DropdownMenuContent align=\"end\" className=\"min-w-60\">\n        {/* Identity header — normal case, single line, with the project role. */}\n        <Row gap=\"2\" className=\"px-2 py-2\">\n          <Avatar label={displayName} size=\"md\" />\n          <Stack gap=\"1\" className=\"min-w-0 flex-1\">\n            <Text size=\"sm\" weight=\"medium\" className=\"truncate leading-tight\">\n              {displayName}\n            </Text>\n            {role ? (\n              <Row>\n                <RoleBadge role={role} />\n              </Row>\n            ) : null}\n          </Stack>\n        </Row>\n        <DropdownMenuSeparator />\n        {/* Theme switch — preventDefault keeps the menu open so the change is visible. */}\n        <DropdownMenuItem\n          onSelect={(event) => {\n            event.preventDefault()\n            setTheme(isDark ? 'light' : 'dark')\n          }}\n        >\n          {isDark ? <Sun /> : <Moon />}\n          {isDark ? t('userMenu.lightMode') : t('userMenu.darkMode')}\n        </DropdownMenuItem>\n        {/* TODO(user-settings): point this at an account-settings surface once one\n            exists (today only project-scoped settings are implemented). */}\n        <DropdownMenuItem disabled>\n          <Settings />\n          {t('userMenu.accountSettings')}\n          <Spacer />\n          <Badge variant=\"outline\">{t('userMenu.soon')}</Badge>\n        </DropdownMenuItem>\n        <DropdownMenuSeparator />\n        <DropdownMenuItem variant=\"destructive\" onSelect={() => void auth.signOut()}>\n          <LogOut />\n          {t('userMenu.signOut')}\n        </DropdownMenuItem>\n      </DropdownMenuContent>\n    </DropdownMenu>\n  )\n}\n\nexport function RoleBadge({ role }: { role: ProjectRole }) {\n  // Variant by capability tier (EC-240c), not role literals — a custom role set\n  // styles by what it grants: administer → primary, write → info, else outline.\n  const variant = roleGrantsCapability(role, 'project.administer')\n    ? 'primary'\n    : roleGrantsCapability(role, 'content.write')\n      ? 'info'\n      : 'outline'\n  return <Badge variant={variant}>{role}</Badge>\n}\n"]}
+{"version":3,"file":"current-user-menu.js","sourceRoot":"","sources":["../../src/components/current-user-menu.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,cAAc,CAAA;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAA;AAElE,OAAO,EACL,MAAM,EACN,KAAK,EACL,MAAM,EACN,YAAY,EACZ,mBAAmB,EACnB,gBAAgB,EAChB,qBAAqB,EACrB,mBAAmB,EACnB,GAAG,EACH,KAAK,EACL,IAAI,GACL,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,oBAAoB,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAA;AACxF,OAAO,EAAE,IAAI,EAAE,MAAM,4BAA4B,CAAA;AACjD,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAE1C;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,EAAE,SAAS,EAAgC;IACzE,MAAM,IAAI,GAAG,OAAO,EAAE,CAAA;IACtB,MAAM,IAAI,GAAG,cAAc,CAAC,SAAS,CAAC,CAAA;IACtC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,QAAQ,EAAE,CAAA;IACtC,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAA;IAC9B,MAAM,CAAC,GAAG,IAAI,EAAE,CAAA;IAChB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,CAAA;IAC/B,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IAEtB,8EAA8E;IAC9E,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAA;IAC3C,MAAM,MAAM,GAAG,KAAK,KAAK,MAAM,CAAA;IAE/B,OAAO,CACL,MAAC,YAAY,eACX,KAAC,mBAAmB,IAAC,OAAO,kBAC1B,KAAC,MAAM,IAAC,OAAO,EAAC,OAAO,EAAC,IAAI,EAAC,SAAS,EAAC,SAAS,EAAC,cAAc,gBAAa,CAAC,CAAC,sBAAsB,CAAC,YACnG,KAAC,MAAM,IAAC,KAAK,EAAE,WAAW,EAAE,IAAI,EAAC,IAAI,GAAG,GACjC,GACW,EACtB,MAAC,mBAAmB,IAAC,KAAK,EAAC,KAAK,EAAC,SAAS,EAAC,UAAU,aAEnD,MAAC,GAAG,IAAC,GAAG,EAAC,GAAG,EAAC,SAAS,EAAC,WAAW,aAChC,KAAC,MAAM,IAAC,KAAK,EAAE,WAAW,EAAE,IAAI,EAAC,IAAI,GAAG,EACxC,MAAC,KAAK,IAAC,GAAG,EAAC,GAAG,EAAC,SAAS,EAAC,gBAAgB,aACvC,KAAC,IAAI,IAAC,IAAI,EAAC,IAAI,EAAC,MAAM,EAAC,QAAQ,EAAC,SAAS,EAAC,wBAAwB,YAC/D,WAAW,GACP,EACN,IAAI,CAAC,CAAC,CAAC,CACN,KAAC,GAAG,cACF,KAAC,SAAS,IAAC,IAAI,EAAE,IAAI,GAAI,GACrB,CACP,CAAC,CAAC,CAAC,IAAI,IACF,IACJ,EACN,KAAC,qBAAqB,KAAG,EAEzB,MAAC,gBAAgB,IACf,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;4BAClB,KAAK,CAAC,cAAc,EAAE,CAAA;4BACtB,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;wBACrC,CAAC,aAEA,MAAM,CAAC,CAAC,CAAC,KAAC,GAAG,KAAG,CAAC,CAAC,CAAC,KAAC,IAAI,KAAG,EAC3B,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,IACzC,EAInB,MAAC,gBAAgB,IACf,QAAQ,EAAE,CAAC,SAAS,EACpB,QAAQ,EAAE,GAAG,EAAE;4BACb,IAAI,SAAS,EAAE,CAAC;gCACd,KAAK,QAAQ,CAAC;oCACZ,EAAE,EAAE,oBAAoB;oCACxB,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;iCACxD,CAAC,CAAA;4BACJ,CAAC;wBACH,CAAC,aAED,KAAC,QAAQ,KAAG,EACX,CAAC,CAAC,0BAA0B,CAAC,IACb,EACnB,KAAC,qBAAqB,KAAG,EACzB,MAAC,gBAAgB,IAAC,OAAO,EAAC,aAAa,EAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,OAAO,EAAE,aACzE,KAAC,MAAM,KAAG,EACT,CAAC,CAAC,kBAAkB,CAAC,IACL,IACC,IACT,CAChB,CAAA;AACH,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,EAAE,IAAI,EAAyB;IACvD,8EAA8E;IAC9E,8EAA8E;IAC9E,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,EAAE,oBAAoB,CAAC;QAC9D,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,oBAAoB,CAAC,IAAI,EAAE,eAAe,CAAC;YAC3C,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,SAAS,CAAA;IACf,OAAO,KAAC,KAAK,IAAC,OAAO,EAAE,OAAO,YAAG,IAAI,GAAS,CAAA;AAChD,CAAC","sourcesContent":["import { LogOut, Moon, Settings, Sun } from 'lucide-react'\nimport { roleGrantsCapability } from '@elytracms/core/persistence'\nimport type { ProjectRole } from '@elytracms/core/persistence'\nimport {\n  Avatar,\n  Badge,\n  Button,\n  DropdownMenu,\n  DropdownMenuContent,\n  DropdownMenuItem,\n  DropdownMenuSeparator,\n  DropdownMenuTrigger,\n  Row,\n  Stack,\n  Text,\n} from '@elytracms/studio/ui'\nimport { STUDIO_PROJECT_ROUTE, studioPath, useNavigate } from '@elytracms/studio/router'\nimport { useT } from '@elytracms/studio/lib/i18n'\nimport { useAuth, useProjectRole } from './auth-context'\nimport { useTheme } from './theme-context'\n\n/**\n * Current-user affordance in the shell header (EC-150): who is signed in,\n * their role on the active project (badge), theme switch, and sign-out. Role\n * display is informational — actual enforcement happens at the operations\n * chokepoint and server-side, never in the UI.\n */\nexport function CurrentUserMenu({ projectId }: { projectId: string | null }) {\n  const auth = useAuth()\n  const role = useProjectRole(projectId)\n  const { theme, setTheme } = useTheme()\n  const navigate = useNavigate()\n  const t = useT()\n  const user = auth.session?.user\n  if (!user) return null\n\n  // Show one identity line — the name if set, otherwise the email (never both).\n  const displayName = user.name ?? user.email\n  const isDark = theme === 'dark'\n\n  return (\n    <DropdownMenu>\n      <DropdownMenuTrigger asChild>\n        <Button variant=\"ghost\" size=\"icon-sm\" className=\"rounded-full\" aria-label={t('userMenu.accountMenu')}>\n          <Avatar label={displayName} size=\"sm\" />\n        </Button>\n      </DropdownMenuTrigger>\n      <DropdownMenuContent align=\"end\" className=\"min-w-60\">\n        {/* Identity header — normal case, single line, with the project role. */}\n        <Row gap=\"2\" className=\"px-2 py-2\">\n          <Avatar label={displayName} size=\"md\" />\n          <Stack gap=\"1\" className=\"min-w-0 flex-1\">\n            <Text size=\"sm\" weight=\"medium\" className=\"truncate leading-tight\">\n              {displayName}\n            </Text>\n            {role ? (\n              <Row>\n                <RoleBadge role={role} />\n              </Row>\n            ) : null}\n          </Stack>\n        </Row>\n        <DropdownMenuSeparator />\n        {/* Theme switch — preventDefault keeps the menu open so the change is visible. */}\n        <DropdownMenuItem\n          onSelect={(event) => {\n            event.preventDefault()\n            setTheme(isDark ? 'light' : 'dark')\n          }}\n        >\n          {isDark ? <Sun /> : <Moon />}\n          {isDark ? t('userMenu.lightMode') : t('userMenu.darkMode')}\n        </DropdownMenuItem>\n        {/* Account settings (EC-240 H-tail item 4): the member's OWN record in the\n            portable edit shell — self-permitted identity + password. Needs a project\n            scope to address the users route; disabled on the project-less shell. */}\n        <DropdownMenuItem\n          disabled={!projectId}\n          onSelect={() => {\n            if (projectId) {\n              void navigate({\n                to: STUDIO_PROJECT_ROUTE,\n                params: { projectId, _splat: studioPath.user(user.id) },\n              })\n            }\n          }}\n        >\n          <Settings />\n          {t('userMenu.accountSettings')}\n        </DropdownMenuItem>\n        <DropdownMenuSeparator />\n        <DropdownMenuItem variant=\"destructive\" onSelect={() => void auth.signOut()}>\n          <LogOut />\n          {t('userMenu.signOut')}\n        </DropdownMenuItem>\n      </DropdownMenuContent>\n    </DropdownMenu>\n  )\n}\n\nexport function RoleBadge({ role }: { role: ProjectRole }) {\n  // Variant by capability tier (EC-240c), not role literals — a custom role set\n  // styles by what it grants: administer → primary, write → info, else outline.\n  const variant = roleGrantsCapability(role, 'project.administer')\n    ? 'primary'\n    : roleGrantsCapability(role, 'content.write')\n      ? 'info'\n      : 'outline'\n  return <Badge variant={variant}>{role}</Badge>\n}\n"]}

package/dist/components/deployment-setup-gate.d.ts

@@ -0,0 +1,31 @@
+import type { ReactNode } from 'react';
+import type { DeploymentReadinessReport } from '@elytracms/core/export-sync/deployment-ready';
+/**
+ * Deployment-setup boot gate (EC-258) — the single readiness surface that
+ * supersedes the separate `BackendGate` (missing `VITE_CONVEX_URL` / unreachable)
+ * and `WorkspaceGate` (invalid config) screens by composing the shared
+ * `checkDeploymentReady` contract. It renders ONE deterministic "Deployment setup"
+ * screen listing each failing precondition with its copy-pasteable fix, instead of
+ * letting the app boot into a misleading downstream error (most painfully the
+ * Konditorei JWT-key footgun). All checks passing → children render untouched.
+ *
+ * Runs before auth and any adapter is constructed (it is the thing that keeps
+ * `selectAuthAdapter`/`selectPersistenceAdapter` from throwing on a misconfigured
+ * backend). Convex mode probes reachability once on the client (`adapter.status()`)
+ * with a retry; playground and unconfigured resolve synchronously. SSR renders the
+ * deterministic "checking" state. Auth-signing-keys is reported as `unknown` at boot
+ * (the JWKS endpoint is CORS-blocked from the browser — EC-257's honest sign-in error
+ * is the browser's actionable surface; `elytra doctor` probes it from node), and the
+ * per-user bucket stays `unknown` (this gate runs pre-auth), so neither ever blocks boot.
+ */
+export declare function DeploymentSetupGate({ children }: {
+    children: ReactNode;
+}): import("react").JSX.Element;
+/**
+ * The unified "Deployment setup" screen (EC-258): every failing check + its exact
+ * fix. Pure/presentational so it is fixture-reproducible and static-render testable.
+ */
+export declare function DeploymentSetupScreen({ report, onRetry, }: {
+    report: DeploymentReadinessReport;
+    onRetry?: () => void;
+}): import("react").JSX.Element;

package/dist/components/deployment-setup-gate.js

@@ -0,0 +1,92 @@
+import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
+import { useCallback, useEffect, useMemo, useState } from 'react';
+import { Button, Card, CardContent, CardHeader, CardTitle, Code, Stack, Text } from '@elytracms/studio/ui';
+import { resolveBackendConfig, selectPersistenceAdapter, studioDeploymentReadiness, } from '@elytracms/studio/lib/persistence';
+import { getWorkspaceState, resolveDeploymentCollections, resolveDeploymentUrl, } from '@elytracms/studio/lib/workspace';
+import { translate } from '@elytracms/studio/lib/i18n';
+/**
+ * Deployment-setup boot gate (EC-258) — the single readiness surface that
+ * supersedes the separate `BackendGate` (missing `VITE_CONVEX_URL` / unreachable)
+ * and `WorkspaceGate` (invalid config) screens by composing the shared
+ * `checkDeploymentReady` contract. It renders ONE deterministic "Deployment setup"
+ * screen listing each failing precondition with its copy-pasteable fix, instead of
+ * letting the app boot into a misleading downstream error (most painfully the
+ * Konditorei JWT-key footgun). All checks passing → children render untouched.
+ *
+ * Runs before auth and any adapter is constructed (it is the thing that keeps
+ * `selectAuthAdapter`/`selectPersistenceAdapter` from throwing on a misconfigured
+ * backend). Convex mode probes reachability once on the client (`adapter.status()`)
+ * with a retry; playground and unconfigured resolve synchronously. SSR renders the
+ * deterministic "checking" state. Auth-signing-keys is reported as `unknown` at boot
+ * (the JWKS endpoint is CORS-blocked from the browser — EC-257's honest sign-in error
+ * is the browser's actionable surface; `elytra doctor` probes it from node), and the
+ * per-user bucket stays `unknown` (this gate runs pre-auth), so neither ever blocks boot.
+ */
+export function DeploymentSetupGate({ children }) {
+    const config = useMemo(() => resolveBackendConfig(), []);
+    const staticReport = useCallback(() => studioDeploymentReadiness({
+        backend: config,
+        workspace: getWorkspaceState(),
+        collections: resolveDeploymentCollections(),
+    }), [config]);
+    const [state, setState] = useState(() => config.kind === 'convex' ? { phase: 'checking' } : { phase: 'resolved', report: staticReport() });
+    const check = useCallback(() => {
+        if (config.kind !== 'convex') {
+            setState({ phase: 'resolved', report: staticReport() });
+            return;
+        }
+        const effectiveUrl = resolveDeploymentUrl(config.url);
+        const resolve = (reachable) => setState({
+            phase: 'resolved',
+            report: studioDeploymentReadiness({
+                backend: config,
+                effectiveUrl,
+                workspace: getWorkspaceState(),
+                collections: resolveDeploymentCollections(),
+                reachable,
+            }),
+        });
+        setState({ phase: 'checking' });
+        void selectPersistenceAdapter()
+            .then((adapter) => adapter.status())
+            .then((status) => resolve({ available: status.available, ...(status.detail ? { detail: status.detail } : {}) }))
+            .catch((error) => resolve({ available: false, detail: error instanceof Error ? error.message : String(error) }));
+    }, [config, staticReport]);
+    useEffect(() => {
+        if (config.kind === 'convex')
+            check();
+    }, [config.kind, check]);
+    if (state.phase === 'checking')
+        return _jsx(DeploymentChecking, {});
+    if (blockingFailures(state.report).length > 0) {
+        return (_jsx(DeploymentSetupScreen, { report: state.report, onRetry: config.kind === 'convex' ? check : undefined }));
+    }
+    return _jsx(_Fragment, { children: children });
+}
+/**
+ * The checks that BLOCK boot: a failed deployment- or app-level precondition. The
+ * per-user bucket ("not a member") is not a boot blocker — it is surfaced post-auth
+ * ("ask an admin"), and at boot it is `unknown` (pre-auth) anyway.
+ */
+function blockingFailures(report) {
+    return report.checks.filter((c) => c.status === 'fail' && (c.bucket === 'deployment' || c.bucket === 'app'));
+}
+/** Deterministic boot state while the backend probe is in flight (also SSR output). */
+function DeploymentChecking() {
+    return (_jsx(BootScreenFrame, { children: _jsx(Text, { size: "sm", tone: "muted", children: translate('shell.deploymentSetup.checking') }) }));
+}
+/**
+ * The unified "Deployment setup" screen (EC-258): every failing check + its exact
+ * fix. Pure/presentational so it is fixture-reproducible and static-render testable.
+ */
+export function DeploymentSetupScreen({ report, onRetry, }) {
+    const failures = report.checks.filter((c) => c.status === 'fail');
+    return (_jsx(BootScreenFrame, { children: _jsxs(Card, { className: "max-w-2xl border-destructive/40", children: [_jsx(CardHeader, { children: _jsx(CardTitle, { children: translate('shell.deploymentSetup.title') }) }), _jsx(CardContent, { children: _jsxs(Stack, { gap: "3", children: [_jsx(Text, { size: "sm", tone: "muted", children: translate('shell.deploymentSetup.description') }), _jsx(Stack, { gap: "2", role: "list", "aria-label": translate('shell.deploymentSetup.issuesLabel'), children: failures.map((check) => (_jsx(CheckRow, { check: check }, check.id))) }), onRetry ? (_jsx(Button, { variant: "outline", size: "sm", onClick: onRetry, className: "self-start", children: translate('shell.deploymentSetup.retry') })) : null] }) })] }) }));
+}
+function CheckRow({ check }) {
+    return (_jsxs("div", { role: "listitem", className: "rounded-md border border-destructive/30 bg-destructive/5 p-2", children: [_jsxs(Text, { size: "xs", mono: true, className: "text-destructive", children: ["[", check.id, "]"] }), _jsx(Text, { size: "sm", children: check.detail }), check.fix ? (_jsxs(Text, { size: "xs", tone: "muted", className: "mt-1", children: [translate('shell.deploymentSetup.fixLabel'), ": ", _jsx(Code, { className: "break-all", children: check.fix })] })) : null] }));
+}
+function BootScreenFrame({ children }) {
+    return _jsx("div", { className: "grid min-h-dvh place-items-center bg-background p-6", children: children });
+}
+//# sourceMappingURL=deployment-setup-gate.js.map

package/dist/components/deployment-setup-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment-setup-gate.js","sourceRoot":"","sources":["../../src/components/deployment-setup-gate.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAEjE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAA;AAC1G,OAAO,EACL,oBAAoB,EACpB,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,mCAAmC,CAAA;AAC1C,OAAO,EACL,iBAAiB,EACjB,4BAA4B,EAC5B,oBAAoB,GACrB,MAAM,iCAAiC,CAAA;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAA;AAMtD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAAE,QAAQ,EAA2B;IACvE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,oBAAoB,EAAE,EAAE,EAAE,CAAC,CAAA;IAExD,MAAM,YAAY,GAAG,WAAW,CAC9B,GAA8B,EAAE,CAC9B,yBAAyB,CAAC;QACxB,OAAO,EAAE,MAAM;QACf,SAAS,EAAE,iBAAiB,EAAE;QAC9B,WAAW,EAAE,4BAA4B,EAAE;KAC5C,CAAC,EACJ,CAAC,MAAM,CAAC,CACT,CAAA;IAED,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAY,GAAG,EAAE,CACjD,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,CACjG,CAAA;IAED,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;QAC7B,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,QAAQ,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,CAAC,CAAA;YACvD,OAAM;QACR,CAAC;QACD,MAAM,YAAY,GAAG,oBAAoB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACrD,MAAM,OAAO,GAAG,CAAC,SAAkD,EAAE,EAAE,CACrE,QAAQ,CAAC;YACP,KAAK,EAAE,UAAU;YACjB,MAAM,EAAE,yBAAyB,CAAC;gBAChC,OAAO,EAAE,MAAM;gBACf,YAAY;gBACZ,SAAS,EAAE,iBAAiB,EAAE;gBAC9B,WAAW,EAAE,4BAA4B,EAAE;gBAC3C,SAAS;aACV,CAAC;SACH,CAAC,CAAA;QACJ,QAAQ,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAA;QAC/B,KAAK,wBAAwB,EAAE;aAC5B,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;aACnC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CACf,OAAO,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAC9F;aACA,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CACxB,OAAO,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAC9F,CAAA;IACL,CAAC,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAA;IAE1B,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;YAAE,KAAK,EAAE,CAAA;IACvC,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAA;IAExB,IAAI,KAAK,CAAC,KAAK,KAAK,UAAU;QAAE,OAAO,KAAC,kBAAkB,KAAG,CAAA;IAC7D,IAAI,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,OAAO,CACL,KAAC,qBAAqB,IACpB,MAAM,EAAE,KAAK,CAAC,MAAM,EACpB,OAAO,EAAE,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,GACrD,CACH,CAAA;IACH,CAAC;IACD,OAAO,4BAAG,QAAQ,GAAI,CAAA;AACxB,CAAC;AAID;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,MAAiC;IACzD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CACzB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,YAAY,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,CAChF,CAAA;AACH,CAAC;AAED,uFAAuF;AACvF,SAAS,kBAAkB;IACzB,OAAO,CACL,KAAC,eAAe,cACd,KAAC,IAAI,IAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,OAAO,YACzB,SAAS,CAAC,gCAAgC,CAAC,GACvC,GACS,CACnB,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,EACpC,MAAM,EACN,OAAO,GAIR;IACC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAA;IACjE,OAAO,CACL,KAAC,eAAe,cACd,MAAC,IAAI,IAAC,SAAS,EAAC,iCAAiC,aAC/C,KAAC,UAAU,cACT,KAAC,SAAS,cAAE,SAAS,CAAC,6BAA6B,CAAC,GAAa,GACtD,EACb,KAAC,WAAW,cACV,MAAC,KAAK,IAAC,GAAG,EAAC,GAAG,aACZ,KAAC,IAAI,IAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,OAAO,YACzB,SAAS,CAAC,mCAAmC,CAAC,GAC1C,EACP,KAAC,KAAK,IAAC,GAAG,EAAC,GAAG,EAAC,IAAI,EAAC,MAAM,gBAAa,SAAS,CAAC,mCAAmC,CAAC,YAClF,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CACvB,KAAC,QAAQ,IAAgB,KAAK,EAAE,KAAK,IAAtB,KAAK,CAAC,EAAE,CAAkB,CAC1C,CAAC,GACI,EACP,OAAO,CAAC,CAAC,CAAC,CACT,KAAC,MAAM,IAAC,OAAO,EAAC,SAAS,EAAC,IAAI,EAAC,IAAI,EAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAC,YAAY,YACzE,SAAS,CAAC,6BAA6B,CAAC,GAClC,CACV,CAAC,CAAC,CAAC,IAAI,IACF,GACI,IACT,GACS,CACnB,CAAA;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,EAAE,KAAK,EAA6B;IACpD,OAAO,CACL,eAAK,IAAI,EAAC,UAAU,EAAC,SAAS,EAAC,8DAA8D,aAC3F,MAAC,IAAI,IAAC,IAAI,EAAC,IAAI,EAAC,IAAI,QAAC,SAAS,EAAC,kBAAkB,kBAC7C,KAAK,CAAC,EAAE,SACL,EACP,KAAC,IAAI,IAAC,IAAI,EAAC,IAAI,YAAE,KAAK,CAAC,MAAM,GAAQ,EACpC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CACX,MAAC,IAAI,IAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,OAAO,EAAC,SAAS,EAAC,MAAM,aAC1C,SAAS,CAAC,gCAAgC,CAAC,QAAG,KAAC,IAAI,IAAC,SAAS,EAAC,WAAW,YAAE,KAAK,CAAC,GAAG,GAAQ,IACxF,CACR,CAAC,CAAC,CAAC,IAAI,IACJ,CACP,CAAA;AACH,CAAC;AAED,SAAS,eAAe,CAAC,EAAE,QAAQ,EAA2B;IAC5D,OAAO,cAAK,SAAS,EAAC,qDAAqD,YAAE,QAAQ,GAAO,CAAA;AAC9F,CAAC","sourcesContent":["import { useCallback, useEffect, useMemo, useState } from 'react'\nimport type { ReactNode } from 'react'\nimport { Button, Card, CardContent, CardHeader, CardTitle, Code, Stack, Text } from '@elytracms/studio/ui'\nimport {\n  resolveBackendConfig,\n  selectPersistenceAdapter,\n  studioDeploymentReadiness,\n} from '@elytracms/studio/lib/persistence'\nimport {\n  getWorkspaceState,\n  resolveDeploymentCollections,\n  resolveDeploymentUrl,\n} from '@elytracms/studio/lib/workspace'\nimport { translate } from '@elytracms/studio/lib/i18n'\nimport type {\n  DeploymentReadinessReport,\n  ReadinessCheck,\n} from '@elytracms/core/export-sync/deployment-ready'\n\n/**\n * Deployment-setup boot gate (EC-258) — the single readiness surface that\n * supersedes the separate `BackendGate` (missing `VITE_CONVEX_URL` / unreachable)\n * and `WorkspaceGate` (invalid config) screens by composing the shared\n * `checkDeploymentReady` contract. It renders ONE deterministic \"Deployment setup\"\n * screen listing each failing precondition with its copy-pasteable fix, instead of\n * letting the app boot into a misleading downstream error (most painfully the\n * Konditorei JWT-key footgun). All checks passing → children render untouched.\n *\n * Runs before auth and any adapter is constructed (it is the thing that keeps\n * `selectAuthAdapter`/`selectPersistenceAdapter` from throwing on a misconfigured\n * backend). Convex mode probes reachability once on the client (`adapter.status()`)\n * with a retry; playground and unconfigured resolve synchronously. SSR renders the\n * deterministic \"checking\" state. Auth-signing-keys is reported as `unknown` at boot\n * (the JWKS endpoint is CORS-blocked from the browser — EC-257's honest sign-in error\n * is the browser's actionable surface; `elytra doctor` probes it from node), and the\n * per-user bucket stays `unknown` (this gate runs pre-auth), so neither ever blocks boot.\n */\nexport function DeploymentSetupGate({ children }: { children: ReactNode }) {\n  const config = useMemo(() => resolveBackendConfig(), [])\n\n  const staticReport = useCallback(\n    (): DeploymentReadinessReport =>\n      studioDeploymentReadiness({\n        backend: config,\n        workspace: getWorkspaceState(),\n        collections: resolveDeploymentCollections(),\n      }),\n    [config],\n  )\n\n  const [state, setState] = useState<GateState>(() =>\n    config.kind === 'convex' ? { phase: 'checking' } : { phase: 'resolved', report: staticReport() },\n  )\n\n  const check = useCallback(() => {\n    if (config.kind !== 'convex') {\n      setState({ phase: 'resolved', report: staticReport() })\n      return\n    }\n    const effectiveUrl = resolveDeploymentUrl(config.url)\n    const resolve = (reachable: { available: boolean; detail?: string }) =>\n      setState({\n        phase: 'resolved',\n        report: studioDeploymentReadiness({\n          backend: config,\n          effectiveUrl,\n          workspace: getWorkspaceState(),\n          collections: resolveDeploymentCollections(),\n          reachable,\n        }),\n      })\n    setState({ phase: 'checking' })\n    void selectPersistenceAdapter()\n      .then((adapter) => adapter.status())\n      .then((status) =>\n        resolve({ available: status.available, ...(status.detail ? { detail: status.detail } : {}) }),\n      )\n      .catch((error: unknown) =>\n        resolve({ available: false, detail: error instanceof Error ? error.message : String(error) }),\n      )\n  }, [config, staticReport])\n\n  useEffect(() => {\n    if (config.kind === 'convex') check()\n  }, [config.kind, check])\n\n  if (state.phase === 'checking') return <DeploymentChecking />\n  if (blockingFailures(state.report).length > 0) {\n    return (\n      <DeploymentSetupScreen\n        report={state.report}\n        onRetry={config.kind === 'convex' ? check : undefined}\n      />\n    )\n  }\n  return <>{children}</>\n}\n\ntype GateState = { phase: 'checking' } | { phase: 'resolved'; report: DeploymentReadinessReport }\n\n/**\n * The checks that BLOCK boot: a failed deployment- or app-level precondition. The\n * per-user bucket (\"not a member\") is not a boot blocker — it is surfaced post-auth\n * (\"ask an admin\"), and at boot it is `unknown` (pre-auth) anyway.\n */\nfunction blockingFailures(report: DeploymentReadinessReport): ReadinessCheck[] {\n  return report.checks.filter(\n    (c) => c.status === 'fail' && (c.bucket === 'deployment' || c.bucket === 'app'),\n  )\n}\n\n/** Deterministic boot state while the backend probe is in flight (also SSR output). */\nfunction DeploymentChecking() {\n  return (\n    <BootScreenFrame>\n      <Text size=\"sm\" tone=\"muted\">\n        {translate('shell.deploymentSetup.checking')}\n      </Text>\n    </BootScreenFrame>\n  )\n}\n\n/**\n * The unified \"Deployment setup\" screen (EC-258): every failing check + its exact\n * fix. Pure/presentational so it is fixture-reproducible and static-render testable.\n */\nexport function DeploymentSetupScreen({\n  report,\n  onRetry,\n}: {\n  report: DeploymentReadinessReport\n  onRetry?: () => void\n}) {\n  const failures = report.checks.filter((c) => c.status === 'fail')\n  return (\n    <BootScreenFrame>\n      <Card className=\"max-w-2xl border-destructive/40\">\n        <CardHeader>\n          <CardTitle>{translate('shell.deploymentSetup.title')}</CardTitle>\n        </CardHeader>\n        <CardContent>\n          <Stack gap=\"3\">\n            <Text size=\"sm\" tone=\"muted\">\n              {translate('shell.deploymentSetup.description')}\n            </Text>\n            <Stack gap=\"2\" role=\"list\" aria-label={translate('shell.deploymentSetup.issuesLabel')}>\n              {failures.map((check) => (\n                <CheckRow key={check.id} check={check} />\n              ))}\n            </Stack>\n            {onRetry ? (\n              <Button variant=\"outline\" size=\"sm\" onClick={onRetry} className=\"self-start\">\n                {translate('shell.deploymentSetup.retry')}\n              </Button>\n            ) : null}\n          </Stack>\n        </CardContent>\n      </Card>\n    </BootScreenFrame>\n  )\n}\n\nfunction CheckRow({ check }: { check: ReadinessCheck }) {\n  return (\n    <div role=\"listitem\" className=\"rounded-md border border-destructive/30 bg-destructive/5 p-2\">\n      <Text size=\"xs\" mono className=\"text-destructive\">\n        [{check.id}]\n      </Text>\n      <Text size=\"sm\">{check.detail}</Text>\n      {check.fix ? (\n        <Text size=\"xs\" tone=\"muted\" className=\"mt-1\">\n          {translate('shell.deploymentSetup.fixLabel')}: <Code className=\"break-all\">{check.fix}</Code>\n        </Text>\n      ) : null}\n    </div>\n  )\n}\n\nfunction BootScreenFrame({ children }: { children: ReactNode }) {\n  return <div className=\"grid min-h-dvh place-items-center bg-background p-6\">{children}</div>\n}\n"]}

package/dist/components/project-session.d.ts

@@ -7,7 +7,7 @@ import type { HydratedCms, HydratedProjectSession, OperationResult } from '@elyt
  * builder from the latest persisted graph revision, the CMS from the saved
  * schema + documents, publishing from the persisted environment states.
  * This provider runs the `@elytracms/core/operations` hydration queries
- * (`lib/operations/session-hydration`) and — like `BackendGate` — gates its
+ * (`lib/operations/session-hydration`) and — like `DeploymentSetupGate` — gates its
  * children on a deterministic loading state, so fixture content never
  * flashes (and is never editable) before the persisted state arrives.
  *